I now says : “Former versions of this post advised to bind-mount the docker binary from the host to the container. This is not reliable anymore, because the Docker Engine is no longer distributed as (almost) static libraries. If you want to use e.g. Docker from your Jenkins CI system, you have multiple options:
installing the Docker CLI using your base image’s packaging system (i.e. if your image is based on Debian, use .deb packages) […] ”

I ended up installing docker in the jenkins-jnlp-agent of your project. But with docker.sock mounted, it won’t be isolated anymore as images will be sibling (and not children) of the jenkins-jnlp-agent container.

As I said, I might be missing something about Docker container jenkins slave. Your article let me understand docker volumes shared between master and slave, that’s still a good point.

Anyway, good article, it’s interesting to see how things are handled on the Jenkins side.

A couple things I’ve found from working with docker-based CI systems:

Docker may be adding some kind of transparent volume sharing ability, but I’ve found it’s just easier to not worry about mapping volumes to containers or “data-volume” containers. If I need to stick a build artifact into a container, I simply create a new temporary image.

Then if I want artifacts back from a build run, I use docker cp to get them back:

docker cp $ID:/path/to/artifact .

An advantage of this is that you can keep the build container around for debugging if you wish.

It’s been much easier to configure agents with settings and credentials to connect to a remote machine running docker, rather than messing with volume sharing. The idea is that an agent can be spun up on any cluster or machine and not worry about volume sharing paths. That is, when the agent is started, it is configured with DOCKER_HOST, DOCKER_TLS_VERIFY, and DOCKER_CERT_PATH that point to the remote docker build machine. This way the build machine can be cleaned/restarted independently of the cluster of agents.

]]>
Comment on How putting credentials in Git can cost you at least $6,500 in just a few hours by Ashish https://damnhandy.com/2015/09/10/how-putting-credentials-in-git-can-cost-you-at-least-6500-in-just-a-few-hours/comment-page-1/#comment-1483
Thu, 10 Sep 2015 15:51:13 +0000http://damnhandy.wordpress.com/?p=571#comment-1483True.. And intentionally or unintentionally people commit there credentials in source code. Sometime to run build or sometime to run local environment.

]]>
Comment on URI vs. URL: What’s the Difference? by URL, URI & URN.. cakewalk? Not for me atleast.. | Super Compiler https://damnhandy.com/2007/11/19/uri-vs-url-whats-the-difference/comment-page-2/#comment-866
Wed, 17 Jul 2013 07:48:55 +0000http://www.damnhandy.com/2007/11/19/uri-vs-url-whats-the-difference/#comment-866[…] and I should say, the initial results were truly disheartening. The first results that came up was this one by damnhandy.com. Even though the intentions are true, this blog is very much misleading as it […]

]]>
Comment on URL vs. URI vs. URN, in More Concise Terms by URL, URI & URN.. cakewalk? Not for me atleast.. | Super Compiler https://damnhandy.com/2009/08/26/url-vs-uri-vs-urn-in-more-concise-terms/comment-page-1/#comment-1075
Wed, 17 Jul 2013 06:40:25 +0000http://www.damnhandy.com/?p=290#comment-1075[…] this blog is very much misleading as it is pretty clear from the comments. The blog was followed by this and again by this and it gets pretty clear if you read all three. (A trilogy on Uniform […]

]]>
Comment on URI vs. URL: What’s the Difference? by johnny writes « URL vs URI « https://damnhandy.com/2007/11/19/uri-vs-url-whats-the-difference/comment-page-2/#comment-865
Sat, 06 Oct 2012 12:38:32 +0000http://www.damnhandy.com/2007/11/19/uri-vs-url-whats-the-difference/#comment-865[…] by no means a professional on the subject, I’ll just let some guy named Marcus from a Damn Handy ForumÂ do the talking. URL is a deprecated term for a URI that includes the network location and scheme. […]

]]>
Comment on Fun with URI Templates and the Facebook Graph API by Ryan J. McDonough https://damnhandy.com/2012/05/03/fun-with-uri-templates-and-the-facebook-graph-api/comment-page-1/#comment-1089
Fri, 01 Jun 2012 13:34:00 +0000http://damnhandy.com/?p=467#comment-1089Of course! I was involved with the original JAX-RS spec and initial version of RESTEasy. However, the JAX-RS UriBuilder does not support RFC6570 due to the fact that it predates the spec by a few years. It’s also very specific to JAX-RS resources where as the Handy URI Template API is focused on the template expression. Handy URI Templates takes some of the good stuff from UriBuilder but adapts it to the new specification.

]]>
Comment on I want to like SCXML, but executable XML is a bit of a two-bagger by josef betancourt https://damnhandy.com/2012/05/31/i-want-to-like-scxml-but-executable-xml-is-a-bit-of-a-two-bagger/comment-page-1/#comment-1090
Fri, 01 Jun 2012 12:10:00 +0000http://damnhandy.com/?p=495#comment-1090I gave an example of using SCXML without the XML here: Â http://josefbetancourt.wordpress.com/2011/10/16/scxml-with-groovy/